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Amendments to the Claims 

1 . (currently amended) A versatile customizable security and filtering software 
embedded upon a computer-readable medium, the software capable of being that can 
be installed on a computer and be used by a remote user who obtains anonymity on a 
global telecommunications network or by a local user, the software comprising: 

(a) an administrative module that a user interacts with for creating user accounts 
and configuring those user accounts, and for configuring automated services, 

the administrative module for accepting user inputs for configuration settings for 
inbound communications and for outbound communications, and having list 
maintenance functions including list editing, li st d el eting, soarohing of l icto, sav i ng of 
l ists, proxy cha i n i ng rout i ng, adding and do l ot i ng u se ro, interchanging l i s ts and importing 
and e xport i ng l i sts, 

said administrative module for configuring a range of access levels and being 
capable of creating three typ e s of user accounts that have unique user names and 
passwords for each user account including an administrator account that is self- 
configuring and that controls automated services and selects for each account hard 
filtering or soft filtering, regular accounts with administrative privileges other than the 
privilege to create additional accounts, view information on any other accounts or 
configure automated services and regular accounts without administrative privileges 
and in addition a fourth type of user account nameiy one anonymous guest user 
account to be used in a manual launch of the software by general users who have no 
system-based user name or password, 

the administrative module for storing as encrypted files on hardware memory the 
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configurations of the range of access levels for the user accounts created and the 
configurations of the automated services 
(b) an application server including 

(i)-a domain filtering engine capable of using from the encrypted files a 
friendly outbound list and an unfriendly outbound list only one of which is active at any 
given time and an outbound exception list, and using a friendly inbound list and an 
unfriendly inbound list only one of which is active at any given time, and a domain 
inbound exception list, the friendly outbound list, the unfriendly outbound list, the friendly 
inbound list, the unfriendly inbound list, the outbound exception list T and the domain 
inbound exception lis t, a fri e ndly e mail l ist and an unfri e ndly e- ma i l list being uniquely 
configured for each user account, 

the domain filtering engine capable of registering the request in a logfile of 
all web sites requested by a user and capable of performing domain filtering, said 
domain tittering including for inbound requests checking the identity of a requesting 
remote client against the friendly inbound or unfriendly inbound list and domain inbound 
exception list maintained in the encrypted files and including for outbound requests 
checking local user and remote user requested domains, URLs and links against the 
friendly outbound list, unfriendly outbound list and outbound exception list and then with 
respect to both inbound and outbound requests for hard filtering unless overruled by the 
outbound exception list or domain inbound exception list either approving the request, 
terminating the request or terminating and re-routing the request without the knowledge 
of the user, and for soft filtering unless overruled by the outbound exception list or 
domain inbound exception list passing disapproved requests and sending an e-mail 
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alert to authorized recipients regarding the disapproved request, wherein, for requests 
that are terminated and re-rerouted, in b ound communications are arranged so that an 
actual location of a highly sensitive reso u rce is located in an unnuhlished location that [s 
^replacem ent location to which requests rejected by the application server are 
rerouted, wherein clients of approved users are listed in the a p plication server in the 
unfriendly inbound list and are sent bv the application server to the replacement 
location, and wherein clients of un a pproved users are not listed in the unfriendly 
i nbound list and have their request sent to a published address that contains harmless 
information. 

WTTOr 

(ii) a cont e nt filtor i ng ong i no capablo of performing content f i ltering 
d e l uding check i ng a content of a roquootod docum e nt against a fr i ondly oontont 
inbound li st, an unfr i end l y content i nbound Hot, and a content oxception list takon from 
the e noryptod fi l oo, tho friondly oontont inbound lint, the unfr i ondly content inbound l i ot, 
only ono of tho fr i ondly cont e nt inbound l ist and tho unfr i ond l y oontont inbound Hot be i ng 
act i vo at any g i von time, and tho content e xcoption li ot being uniquo l y configured by 
each uoor. and thon for hard filtoring againcttho unfriond l y content inbound l iot oithor 
pass i ng tho roquootod docum e nt if tho oont n nt nf tho rn T t^rtn^ dftcymont m no t on tho 
unfr i endly content i nbound liot or un l occ ovorrulod by tho oontont oxoopt i on liot rojoct i ng 
tho roquootod documont i f tho oontont nf thn m nl . a r»nH rw Mm p nt i0 on ft p un fri 0n d|y 
co ntent inbound liot and for hard filtoring againot the fr i endly oontont inbound l i st eithor 
unlocc overrul e d by tho contont oxception liot paocing tho roqu o otod documont if tho 
conton t of tho roquoct o d documont i c on tho friondly contont inbound liot or rejecting tho 
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re qu e sted documont if tho content of th e roquoct o d documont ic not on tho friondly 
content i nbound l ict and for coft filter i ng againot tho unfri e nd l y contont i nbound Hot oithcr 
approv i ng tho oontont of the r e quootod documont and paooing th e reguootod documont 
i f tho oontont io not on the unfr i ond l y contont i nbound l i ot or unlocc ovorrulod by tho 
contont oxcept i on l iot reject i ng tho oontont of tho requ e sted documont and paoo i ng a 
r e ma i ndor of tho roquootod documont i f tho contont io on tho unfriondly cont e nt inbound 
ti st and for coft fi l tering againot tho fri e nd l y oontont inbound liot o i thor un l occ ovorrulod 
by th e contont oxcopt i on l ict popping tho roquootod docum o nt i f thc - contont ic not on tho 
fr i endly content inbound l ist or paccing tho roquootod docum e nt and highl i ghting tho 
contont of tho roqu o otod documont i f tho content i o on tho friond l y contont i nbound lict, 
s aid oontont filtering aloo includ i ng o mail filtering that chooko a oubjoot, a oondor'o 
addrooc and a condor's domain oga i nct an unfriond l y 0 ma i l list, 0 friondly o mail l i ct 

and an 0 ma i l oxoopt i on Hot, 

the application server acting internally to communicate with the domain filtering 
en 9' ne and with tho contont filtering ongino and acting externally as a proxy server that 
receives requests from HTTP clients, forwards the requests to servers, receives a 
server response and forwards the server response to the HTTP clients. 

2. (original) The software of claim 1, wherein the domain filtering engine also has 
an optional e-mail alert system for hard filtering and for soft filtering. 

3. (currently amended) The software of claim 1, wheroin tho contont fi l tering 
e ngino hoo an i nbound pr i vacy chiold for b l ocking scripting l anguage functiono for 
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partteuta r uo o r oooounto ond whor o wherein the domain filtering engine has an 
outbound privacy shield for blocking disapproved character strings representing 
confidential information. 

4. (canceled) 

5. (canceled) 

6. (original) The software of claim 1 , including an automated scheduler that 
controls a launching of the application server automatically and decides which user 
account to activate and when to shut off an access to a world wide web, andincludes 
an automated list updaterthat updates the friendly inbound list, the unfriendly inbound 

list, the friendly outbound list and the unfriendly outbound lists for each user account 

from links on the web. 

7. (canceled) 



8. (canceled) 

9. (currently amended) The software of claim 1, wherein the administrative 
module includes an editor, the editor including an editing pane, said editor also including 
an encryption function that generates one or more secret symmetric encryption keys, 
the one or more encryption keys being uniquely associated wrth a text inputted by a 
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user in the editing pane, said encryption function capable of encrypting at the userte 
option all or only a portion of an e-mail message selected bv the user and all or on l y a 
portion of an o mai l m e s s ag e attachment f i l e and eaid e ncryption function a l co capabl e 
of e ncrypt i ng all or a combination of fifes on a hard drive loca l to th e software . 

10. (original) The software of claim 1, wherein the application server, instead of 
acting externally as a proxy server, acts externally within a deployment of a chain of 
proxy servers, said chain of proxy servers including at least a first proxy server that 
receives requests from HTTP clients and forwards the requests through a zero or more 
intermediary proxy servers to a last proxy server, said last proxy server forwarding the 
requests to servers, and wherein the last proxy server receives a server response and 
forwards the server response through the zero or more intermediary proxy servers back 
to the first proxy server, which first proxy server forwards the server response to HTTP 
clients. 

1 1 . (original) The software of claim 1 , wherein the administrative module is also 
capable of configuring an automated configuration script file for accessing the global 
telecommunications network. 

12. (original) The software of claim 1, wherein for e-mail filtering includes an 
option of hard e-mail filtering in which an incoming e-mail is deleted from a user e-mail 
inbox and includes an option for soft filtering in which an incoming e-mail remains in the 
user e-mail inbox but is inaccessible to the user. 
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13. (currently amended) A versatile customizable security and filtering software 
embedded upon a com puter-readable medium, the software comprising: 

(a) an administrative module that a user interacts with for creating user accounts 
and configuring those user accounts, and for configuring automated services, 

the admin istrative module for accepting user inputs for configuration settings for 
inbound communications and for outbound communications, and having list 
maintenance functions including list editing, list deleting, searching of lists, saving of 
lists, proxy chaining routing, adding and deleting users, interchanging lists and importing 
and exporting lists, 

said administrative module for configuring a range of access levels and being 
capable of creating three types of user accounts that have unique user names and 
passwords for each user account including an administrator account that is self- 
configuring and that controls automated services and selects for each account hard 
filtering or soft filtering, regular accounts with administrative privileges other than the 
privilege to create additional accounts, view information on any other accounts or 
configure automated services and regular accounts without administrative privileges 
and in addition a fourth type of user account namely one anonymous guest user 
account to be used in a manual launch of the software by general users who have no 
system-based user name or password, 

the admin istrative module for storing as encrypted files on hardware memory the 
configurations of the range of access levels for the user accounts created and the 
configurations of the automated services 
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(b) an application server including 

(i) a domain filtering engine capable of using from the encrypted files a 
friendly outbound list and an unfriendly outbound list only one of which is active at any 
given time and an outbound exception list, and using a friendly inbound list and an 
unfriendly inbound list only one of which is active at any given time, and a domain 
inbound exception list, the friendly outbound list, the unfriendly outbound list, the 
outbound exception list, the domain inbound exception list, a friendly e-mail list and an 
unfriendly e-mail list being uniquely configured for each user account, 

the domain filtering engine capable of registering the request in a logfile of 
all web sites requested by a user and capable of performing domain filtering, said 
domain filtering including domain inbound exception list maintained in the encrypted 
files and including for outbound requests checking local user and remote user 
requested domains, URLs and links against the friendly outbound list, unfriendly 
outbound list and outbound exception list and then with respect to outbound requests 
for hard filtering unless overruled by the outbound exception list or domain inbound 
exception list either approving the request, terminating the request or terminating and 
re-routing the request without the knowledge of the user, and for soft filtering unless 
overruled by the outbound exception list or domain inbound exception list passing 
disapproved requests and sending an e-mail alert to authorized recipients regarding the 
disapproved request, wherein, for requests that are terminated and re-rerouted, inbound 
communications are arranged so that an_ actual location of a highly sensitive resource is 
located in an unpublished location that is a replacement location to which requests 
rejected bv the application server are rerouted, wherein clients of approved users are 

9 
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listed in the application server in the unfriendly inbound list and are sent by the 
application server to the replacement location, and wherein clients of unapproved users 
are not listed in the unfriendly inbound list and have their request sent to a published 
address that contains harmless information, and 

(ii) a content filtering engine capable of performing content filtering 
including checking a content of a requested document against a friendly content 
inbound list, an unfriendly content inbound list, and a content exception list taken from 
the encrypted files, the friendly content inbound list, the unfriendly content inbound list, 
only one of the friendly content inbound list and the unfriendly content inbound list being 
active at any given time, and the content exception list being uniquely configured by 
each user, and then for hard filtering against the unfriendly content inbound list either 
passing the requested document if the content of the requested document is not on the 
unfriendly content inbound list or unless overruled by the content exception list rejecting 
the requested document if the content of the requested document is on the unfriendly 
content inbound list and for hard filtering against the friendly content inbound list either 
unless overruled by the content exception list passing the requested document if the 
content of the requested document is on the friendly content inbound list or rejecting the 
requested document if the content of the requested document is not on the friendly 
content inbound list and for soft filtering against the unfriendly content inbound list either 
approving the content of the requested document and passing the requested document 
if the content is not on the unfriendly content inbound list or unless overruled by the 
content exception list rejecting the content of the requested document and passing a 
remainder of the requested document if the content is on the unfriendly content inbound 
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list and for soft filtering against the friendly content inbound list either unless overruled 
by the content exception list passing the requested document if the content is not on the 
friendly content inbound list or passing the requested document and highlighting the 
content of the requested document if the content is on the friendly content inbound list, 
said content filtering also including e-mail filtering that checks a subject, a sender's 
address and a sender's domain against an unfriendly e-mail list, a friendly e-mail list 
and an e-mail exception list, 

the application server acting internally to communicate with the domain filtering 
engine and with the content filtering engine and acting externally as a proxy server that 
receives requests from HTTP clients, forwards the requests to servers, receives a 
server response and forwards the server response to the HTTP clients. 

14. (currently amended) A versatile customizable security and filtering software 
embedded upon a computer-readable medium, the software , comprising: 

(a) an administrative module that a user interacts with for creating user accounts 
and configuring those user accounts, and for configuring automated services, 

the admin istrative module for accepting user inputs for configuration settings for 
inbound communications, and having list maintenance functions including list editing, 
list deleting, searching of lists, saving of lists, proxy chaining routing, adding and 
deleting users, interchanging lists and importing and exporting lists, 

said administrative module for configuring a range of access 
levels and being capable of creating three types of user accounts that have unique user 
names and passwords for each user account including an administrator account that is 
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self-configuring and that controls automated services and selects for each account hard 
filtering or soft filtering, regular accounts with administrative privileges other than the 
privilege to create additional accounts, view information on any other accounts or 
configure automated services and regular accounts without administrative privileges 
and in addition a fourth type of user account namely one anonymous guest user 
account to be used in a manual launch of the software by general users who have no 
system-based user name or password, 

the administrative module for storing as encrypted files on hardware memory the 
configurations of the range of access levels for the user accounts created and the 
configurations of the automated services 
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(b) an application server including a content tittering engine capable of 
performing content filtering including checking a content of a requested 
document against a friendly content inbound list, an unfriendly content inbound 
list, and a content exception list taken from the encrypted files, the friendly 
content inbound list, only one of the friendly content inbound list and the 
unfriendly content inbound list being active at any given time, the unfriendly 
content inbound list and the content exception list being uniquely configured by 
each user, and then for hard filtering against the unfriendly content inbound list 
either passing the requested document if the content of the requested document 
is not on the unfriendly content inbound list or unless overruled by the content 
exception list rejecting the requested document if the content of the requested 
document is on the unfriendly content inbound list and for hard filtering against 
the friendly content inbound list either unless overruled by the content exception 
list passing the requested document if the content of the requested document is 
on the friendly content inbound list or rejecting the requested document if the 
content of the requested document is not on the friendly content inbound list and 
for soft filtering against the unfriendly content inbound list either approving the 
content of the requested document and passing the requested document if the 
content is not on the unfriendly content inbound list or unless overruled by the 
content exception list rejecting the content of the requested document and 
passing a remainder of the requested document if the content is on the unfriendly 
content inbound list and for soft filtering against the friendly content inbound list 
either unless overruled by the content exception list passing the requested 
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document if the content is not on the friendly content inbound list or passing the 
requested document and highlighting the content of the requested document if 
the content is on the friendly content inbound list, said content filtering also 
including e-mail filtering that checks a subject, a sender's address and a sender's 
domain against an unfriendly e-mail list, a friendly e-mail list and an e-mail 
exception list, 

the application server acting internally to communicate with the domain 
filtering engine and with the content filtering engine and acting externally as a 
proxy server that receives requests from HTTP clients, forwards the requests to 
servers, receives a server response and forwards the server response to the 
HTTP clients. 

15. (currently amended) A versatile customizable content security 
software embedded upon a computer-readable memory, the software , 
comprising: 

an administrative module that a user interacts with for creating user 
accounts, for adding and deleting users and for storing as encrypted files on 
hardware memory the user accounts and wherein the administrative module 
includes an editor, the editor including an editing pane, said editor also including 
an encryption function that generates one or more secret symmetric encryption 
keys, the one or more encryption keys being uniquely associated with a text 
inputted by a user in the editing pane, said encryption function capable of 
encrypting at th e us e r's option all or only a portion of an e-mail message selected 
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b y the user and/or and all or only a portion o f an 0 mal l meobJtf Q attachment fli p 
™ i nr.tnd bv the uoor and pa i d onoryption funct i on aloo capohl n of onopypting nil 
e w oombinotion of f i loc on a hard driv e l o cal to tho ooftw n rfl . 

16. (new) The software of claim 15, wherein said encryption function is 
capable of encrypting all or only a portion of an e-mail message attachment file 
selected by the user and is also capable of encrypting all or some files on a hard 
drive local to the software. 

17. (new) The software of claim 14, wherein the content filtering engine 
has an inbound privacy shield for blocking scripting language functions for 
particular user accounts. 

18. (new) The software of claim 13, wherein the content filtering engine, 
when performing hard filtering, can also replace a requested document that has 
been rejected with a replacement document selected by a user of the 
administrator account. 
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